CVE-2016-6934: XSS

Q: What is the severity of CVE-2016-6934?

CVE-2016-6934 is classified as a medium severity vulnerability due to the potential for cross-site scripting attacks.

Q: How do I fix CVE-2016-6934?

To mitigate CVE-2016-6934, update to Adobe Experience Manager Forms version 6.3 or later, or upgrade to Adobe LiveCycle version 11.0.2.

Q: What are the affected versions for CVE-2016-6934?

CVE-2016-6934 affects Adobe Experience Manager Forms versions up to 6.2, Adobe LiveCycle version 10.0.4, and version 11.0.1.

Q: What type of attack can be executed due to CVE-2016-6934?

CVE-2016-6934 can be exploited to perform cross-site scripting (XSS) attacks.

Q: Which module is vulnerable in CVE-2016-6934?

The PMAdmin module in Adobe Experience Manager Forms and LiveCycle is the component with input validation issues in CVE-2016-6934.

Published Dec 15, 2016

Updated

Adobe Experience Manager Forms versions 6.2 and earlier, LiveCycle 11.0.1, LiveCycle 10.0.4 have an input validation issue in the PMAdmin module that could be used in cross-site scripting attacks.

Affected Software

3 affected components

Adobe Experience Manager Forms<=6.2

Adobe LiveCycle=10.0.4

Adobe LiveCycle=11.0.1

Remediation

Patch Available

https://helpx.adobe.com/security/products/aem-forms/apsb16-40.html

Event History

Dec 15, 2016

CVE Published

via MITRE·06:31 AM

Data Sourced

via MITRE·06:31 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2016-6934?

CVE-2016-6934 is classified as a medium severity vulnerability due to the potential for cross-site scripting attacks.

How do I fix CVE-2016-6934?

To mitigate CVE-2016-6934, update to Adobe Experience Manager Forms version 6.3 or later, or upgrade to Adobe LiveCycle version 11.0.2.

What are the affected versions for CVE-2016-6934?